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Abstract. The point of this note is to prove that the secrecy function attains its maximum 
at y = 1 on all known extremal even unimodular lattices. This is a special case of a conjecture 
by Belfiore and Sole. Further, we will give a very simple method to verify or disprove the 
conjecture on any given unimodular lattice. 

1. Introduction 
Belfiore and Oggier defined in p] the secrecy gain 

ym,0<y @A[yi) 

wliere 

Ga(2) = ^e"ll^ll'^ 

a;GA 

as a new lattice invariant to measure how much confusion the eavesdropper will experience 
while the lattice A is used in Gaussian wiretap coding. The function Sa(2/) = ^^(^yi-j is called 
the secrecy function. Belfiore and Sole then conjectured in [3] that the secrecy function attains 
its maximum at y = 1, which would then be the value of the secrecy gain. The secrecy gain 
was further studied by Oggier, Sole and Belfiore in [6]. The main point of this note is to prove 
the following theorem: 

Theorem 1. The secrecy function obtains its maximum at y = 1 on all known even unimod- 
ular extremal lattices. 

The method used here applies for any given even unimodular (and also for some unimodular 
but not even) lattices. This will be discussed in its own section. 

2. Preliminaries and Lemmas 

For an excellent source on theta-functions, see e.g. the Chapter 10 in Stein's and Shakarchi's 
book [7]. Define the theta function 



Q{z\t)= ^ 



oo 



Now 

oo 

e(z I r) = JJ(1 - + g2n-lg2^i.^(^ ^ ^2n-l^ 



2Txiz\ 

± — q )\^± -T q c -r q c J 

n=l 
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when q = e^^"^ The functions ??2, '&z and ??4 can be written with the help @{z \ r) in the 
following way: 



^2(T) = e--/%(^|r) 
Mr) = 0(0 I r) 



Using the product representation for the Q{z\t) function this reads 

oo 

^2(t) = e"^"/^ 11(1 - + g2n-lg27rir/2)^-^ ^ ^2n-lg-2,rW2) 

n=l 

oo 

= e'^^^/^ 11(1 " + q^n^ii + g2n-2^ 

n=l 

oo 

Ur) = n (1 - + + = 11(1 - + q^n-U2 



n=l n=l 
^4(r) = e f i I r) f](l ~ g2n)(^ ^ ^2n-lg2W2)(i + ^2n-lg-2W2j 

oo 

=n(i-^'")(i-'^'""')'- 



n=l 



A lattice is called unimodular if its determinant = ±1, and the norms are integral, ie, 
||a;|p G Z for all vectors x on the lattice. Further, it is called even, if ||a;|p is even. Otherwise 
it is called odd. A lattice can be even unimodular only if the dimension is divisible by 8. Odd 
unimodular lattices have no such restrictions. 

Let us now have a brief look at the even unimodular lattices. Write the dimension n = 
24m + S/c. Then the theta series of the lattice can be written as a polynomial of the Eisenstein 
series £^4 and the discriminant function A: 



Since £^4=2 (i^^ + i?! + 1?!) and A = 256^2'^3^4' theta function of an even unimodular 
lattice can be easily written as a polynomial of these basic theta functions. Furthermore, the 
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secrecy function can be written as a simple rational function of 



(1) 



4 ' /-^j = l 4 

^3m+k 



??| y ^ 256^' V ^ J \ ^3 

Hence, finding the maximum of the secrecy function is equivalent to finding the minimum of 
the denominator of the previous expression in the range of . 

Definition 2. An even unimodular lattice is called extremal if the norm of the shortest vector 
on the lattice is 2m + 2. 

It is worth noticing that the definition of extremal has changed. Earlier (see e.g. [1]), 
extremal meant that the shortest vector was of length [^J + 1. With the earlier definition 
the highest dimensional self-dual extremal lattice is in dimension 24 (see while with the 
current definition there is a selfdual extremal lattice in dimension 80 (for a construction, see 

ID)- 

Let us now turn to general unimodular lattices, in particular odd ones. Write n = 8fj, + 
where n is the dimension of the lattice. Just like a bit earlier, the theta function of any 
unimodular lattice (regardless of whether it's even or odd), can be written as a polynomial 
(see e.g. (3) in [4j): 



r=0 



where Ag = Yg'i?2^4. Hence 

^' ©A [h^^' J ■ 

Again, to determine the maximum of the function, it suffices to consider the denominator 
polynomial in the range of -^^ll^. 

The following lemma is easy, and follows from the basic properties of the theta functions. 
The proof is here for completeness. 

Lemma 3. Let y G R. The function 



has symmetry: f{y) = f(^ 
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Proof. The formulas (21) in |j5j give the following: 



(?) ^"^ ) = 
(?) (^ ) = 
(?) ^"^ (^ ) = 



Now 



which was to be proved. □ 

We may now formulate a lemma that is crucial in the proof of the main theorem: 
Lemma 4. Let y E M. The function 

attains its maximum when y = 1. This maximum is ^. 

Proof. To shorten the notation, write g = e~^y. Notice that when y increases, g decreases 
and vice versa. Using the product representations for the functions '&2iyi), ^siyi) and '^^{yi), 
we obtain 

'&2iyi)'&A{yi) 
■daiyiy 

/oo \/oo \/oo \ 

=g^/Mn(i+5'")(i+^^'""') 11(1-5'""')' 11(1 +^^'""')"'- 



Now 



and 



\n=\ / \n=l / \n=l 



n(i+5'"-2)=2n(i+5'-) 

n=l n=l 



11(1 +g'"-')-' = n(i + (-5)")' = 11(1 + g^-) n(i - 5'""') 

71=1 n=l \n=l / \n=l / 
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Combining all these pieces together, we obtain 



= 25V4 [ JJ (1 + g2n^2 ) ( n (1 - ^2n-l)2 ) ( (1 + 5^") ) ( J] (1 - g^^-l^ 




/ 00 

(1+5^^)') (11(1-^'"'')') ( 

\n=l / \n=\ 

00 \ 6 

n=l / V n=l / 

Since the factor 2 is just a constant, it suffices to consider the function g'^l'^'^ X^=\^ + 
To find the maximum, let us first differentiate the function: 

Since g^l'^'^ 115^^1 5)") is always positive, it suffices to analyze the part -^+Y^=\ "^^+(-3)'"^'^'* 

to find the maxima. We wish to prove that the derivate has only one zero, because if it has 
only one zero, then this zero has to be located at y = 1 (because the original function has 
symmetry, and therefore, a zero in the point y results in a zero in the point ^ which has to 
be separate unless y = 1. To show that the derivative has only one zero, let us consider the 
second derivative, or actually, the derivative of the part + Y^=\ '^'^x^i^-gy ■ Now 

dg 1^245 ^ 1 + (-5)" ) ~ 24^2 + A. i + (i + {^-g)nfj ■ 

Now we wish to show that this is negative when g G (0, 1). Let us first look at the term 
and the terms in the sum corresponding the values n = 1 and n = 2. Their sum is 

1 1 2-2^2 -73^6 ^ 93^5 _ 5^^4 _ 92^3 _^ 21^2 + 25 - 1 



24^2 (1-5)2 (1+^2)2 2452(1-^)2(1+^2)2 

The denominator is positive when g € (0, 1), and the nominator has two real roots, which are 
both negative (approximately gi « —0.719566 and 52 ~ —0.196021). On positive values of g, 
the nominator is always negative. In particular, the nominator is negative when g G (0, 1). 

Let us now consider the terms n > 2, and show that the sum is negative. Since the original 
function has symmetry y — t- i, and we are only considering the real values of the theta series, 

we may now limit ourselves to the interval y G [l,oo), which means that g G {0,e~'^]. Let us 
now show that the sum of two consecutive terms where the first one corresponds an odd value 
of n, and the second one an even value of n is negative. The sum looks like the following: 

n(n - l)5"-2 n252{«-i) n{n + 1)5""^ (n + ifg^"" 



+ 



gn (1-5*^)2 l + 5'^+l (l+5"+l)2' 
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Let US estimate this, and take a common factor: 

n-2 ( n-1 ng"" (n + l)g (n + l)g"+^ 

<3 i_gn (1 _ gny + 1 + gn+1 (J + gU+iy 

- a-'n ( + + + ^ < ,n-2^ / -(n-l)-g" + (n + l)g - 



when 



Since (n - 1) + > (n - 1), and (n + 1)^ < (n + l)e~'^ < < n - 1, when n > 2, this 
proves that the first derivative has only one zero. This zero is at y = 1. Since the second 
derivative is negative, it means that this point is actually the maximum of the function. The 
maximum value is: 

□ 



3. Proof of the main theorem 
Let us first do on the lattice £^8 a-s a warm-up case. We wish to show that 
Theorem 5. 

(3) ~eM<'^e,{1)- 
Proof. Notice that 



2 V Myif 

Therefore, to show that ([3]) holds, it suffices to show that 



which is equivalent to showing that 

Myi)Myi) < ^2(i)^A(i) 



which we have already done in Lemma HI □ 

Let us now concentrate on the other cases. Again, write z = The following table 

gives the secrecy functions of all known extremal even unimodular lattices (notice that these 
are known only in dimensions 8 — 80) : 
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dimension 



16 
24 
32 
40 
48 
56 
64 
72 
80 



((l-z)3-f|.2)-i 
{{1 - z)^ - 'iil - z)z')-' 



((l-.)6-f(l-%)3.2 + ii.^)-^ 



((1 



((1 



{{l-zf- 
{{l-zf- 



4^2 



^(l-z)V 



21735 



4096 

4 

60345 n ^\3^4 



{l-z)zY' 



ao 



8 



4096 



(1 - zYz'^ - ^^^z 



-1 



53325 ^6^ 
32768 ' , 
202125 Q_ X 6N-1 

32768 V-^ ; 



It suffices to show that the first derivatives of the denominators are negative because then the 
denominator is decreasing, and the function is increasing and obtains its maximum at z = 
In dimension 16 the derivative is 



In dimension 24 the derivative is 



-2(1 -z) < 0. 



_3(1 _ _ < o_ 



In dimension 32 the derivative is 



15 



15 



15 



15 



-4(1 - zy - —z{\ - z) + —2^ = -4(1 - zf - —z{2 -2z + z) = -4(1 -zf -—{2-z) < 0. 
In dimension 40 the derivative is 

-5(1 - zf - ^z{l - zf + ^(1 - z)z'' = -5(1 - zf - ^z{l - z){2z - 1) < 0. 



In dimension 48 the derivative is 



-6(l-.f-f(l 



zyz + 



135 



fi-z)V + 



In dimension 56 the derivative is 
- 7(1 - zf - ^z(l - zf + 



105 .4 , 105 

4 ^ 



3915 
512 

21735 



z^ < -6(1 



zf + 



3915 
512 



-z'^ < 



1024 



/(I 



21735 
4096 ' 



<_7(1_^)6 + ^11^^3(1 _^)<0. 



1024 



In dimension 64 the derivative is 



-8(1 



\7 



75 



+ -1(1 - zfz' - 15(1 - zfz - ^z{l - zf + ^z\l - zf < 0. 



4905 



4905 



256 



128 



In dimension 72 the derivative is 



405 



135 



60345 



60345 



-9{1- zf + ^il-zfz"^ '^{l-zfz+^^j^-A{l-zfz^-^^j^-3{l- 



202125 5 

4096 ^' ^ 4096 ~ " 32768 ^ ' 

which has real zeros ~ 0.3002 and z\ ^ 0.5222, and when z < zq, the derivative is negative, 
which proves this case. It remains to consider the dimension 80, where the derivative is 



.10(l-z)9--(l-z)^z+— (l-2)V+^z3(i_^)4_42525 3 4 

^ 4 ^ ^ 8 ^ ^ 512 ^ ^ 512 ^ ^ 32768 



202125 fi 1212750, 

z ( 



32768 
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which has real roots zq w 0.2889, zi w 0.4491 and Z2 ~ 0.8620, and is negative when z < Zi. 
This proves the theorem. 

4. Method for any given unimodular lattice 

Let A be a unimodular lattice. Then its secrecy function can be written as a polynomial 
P{z), where z = as shown in ([1]) and[2j Now, according Lemma U < z > ^ (the lower 

bound does not follow from the lemma but from the fact that z is a square of a real number). 
Therefore, it suffices to consider the polynomial P{z) on the interval [0, |]. The conjecture is 
true if and only if the polynomial obtains its smallest value on the interval at j. Investigating 
the behaviour of a given polynomial to show whether one point is its minimum on a short 
interval is a very straightforward operation. 
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